I counted greater than a dozen different organizations offering assurances that have been equally complicated, deceptive, or false. Even Moore—a safety veteran with greater than three many years of expertise—instructed me: “The shocking half to me is that Intel/AMD would blanket-state that bodily entry is one way or the other out of scope when it’s the whole level.”
In equity, some TEE customers construct extra protections on prime of the TEEs supplied out of the field. Meta, for instance, stated in an electronic mail that the WhatsApp implementation of SEV-SNP makes use of protections that might block TEE.fail attackers from impersonating its servers. The corporate didn’t dispute that TEE.fail might nonetheless pull secrets and techniques from the AMD TEE.
The Cloudflare theft safety, in the meantime, depends on SME—the engine driving SEV-SNP encryption. The researchers didn’t instantly check SME towards TEE.fail. They did word that SME makes use of deterministic encryption, the cryptographic property that causes all three TEEs to fail. (Extra in regards to the position of deterministic encryption later.)
Others who misstate the TEEs’ protections present extra correct descriptions elsewhere. Given all of the conflicting info, it’s no surprise there’s confusion.
How have you learnt the place the server is? You don’t.
Many TEE customers run their infrastructure inside cloud suppliers comparable to AWS, Azure, or Google, the place protections towards supply-chain and bodily assaults are extraordinarily strong. That raises the bar for a TEE.fail-style assault considerably. (Whether or not the providers may very well be compelled by governments with legitimate subpoenas to assault their very own TEE isn’t clear.)
All these caveats however, there’s usually (1) little dialogue of the rising viability of low-cost, bodily assaults, (2) no proof (but) that implementations not susceptible to the three assaults received’t fall to follow-on analysis, or (3) no method for events counting on TEEs to know the place the servers are working and whether or not they’re free from bodily compromise.
